SharePoint

CloudFiles supports two authentication methods for SharePoint - Integration User and Service Principal. Only one method is active for automations at any given time.

Integration User

The Integration User allows you to connect an account-level SharePoint account, which is used for automations like file backup and organization. To configure, follow the steps below -

1. Navigate to the "Libraries" page and access the SharePoint section on the canvas.
2. Under "Integration User," click the Connect button.
3. Log in to the Microsoft account associated with SharePoint, or select the account if already logged in.
4. Once connected, the username and connection date will be displayed under "Integration User."
5. To change the Integration User, use the Disconnect option and repeat the process.

Service Principal

With service principal, CloudFiles authenticates as the CloudFiles app already registered in your Microsoft tenant. A Global Administrator approves app-level permissions once, and the connection then runs without a user account, license, MFA prompt, or password rotation risk.

The setup happens in three parts: the Salesforce admin generates a setup link, a Microsoft Global Administrator approves the permissions using that link, and the Salesforce admin then activates service principal for automations.

1. Under Service principal, click Setup. The status shows Not configured until this step is completed.
2. In the Tenant URL field, enter your SharePoint tenant URL (for example, https://cloudfileswork.sharepoint.com).
3. Click Generate. CloudFiles generates a setup link and the status changes to Awaiting admin consent. The setup link is active for 7 days.
4. Copy the setup link and share it with your Microsoft Global Administrator. This admin is often not a Salesforce user, which is why the link is shareable and does not require a CloudFiles or Salesforce login.
5. Ask the admin to open the link and approve the permissions requested for the CloudFiles app. Once approved, the status on the SharePoint tab changes to Consent granted.
6. Return to the SharePoint tab and click Switch automations to service principal.

Conflict Behaviors

Specify how the system should handle duplicate files or folders during operations in SharePoint:

• File Conflict Behavior: Options include Rename, Replace, No Op, or Fail.
• Folder Conflict Behavior: Options include No Op, Rename, or Fail.

Register Sites

This option is only needed if you wish to restrict which sites are displayed and available for use. Only registered SharePoint sites will be accessible for users connecting their SharePoint account with CloudFiles. To register a site:

1. Click the Register button under the "Register Sites" section.
2. In the popup window, paste the URL of the SharePoint site (e.g., https://cloudfileswork.sharepoint.com/sites/Demo1) and click Register.
3. The registered sites will appear as a list in the same section.
4. To remove a site, click the delete icon next to it and confirm the action in the "Remove Site" popup.

Sharepoint Rest API Authorization

This authorization is necessary for advanced functionalities such as site creation and property searches within flows. To connect:

1. In the Tenant URL box, paste the URL of the SharePoint (e.g., https://cloudfileswork.sharepoint.com) and click Connect.
2. Log in to the Microsoft account associated with SharePoint, or select the account if already logged in.
3. Accept the Permissions requested by clicking "Accept"
4. The authorized Tenant URL along with the username and connection date will be displayed under the same section.
5. To deauthorize, simply click the Disconnect button.